Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
File: Ay1SsyOaHOPN00MxNIzngN3xZMA.mft (raw, json)
Hash identifier: 7MwNrkG/j/K3P47Q2huaDVDJn1yMmH7VynJQ4kpP4Qg=
Subject key identifier: 51:B7:B9:92:9F:D2:1F:C2:9C:AF:48:A3:B7:1F:C2:24:B5:83:A5:63
Authority key identifier: 03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
Certificate issuer: /CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Certificate serial: 01A0D1931DEA9C9EF0CB22760BC22764D021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
Manifest number: 0B1D
Signing time: Thu 24 Sep 2026 04:01:14 +0000
Manifest this update: Thu 24 Sep 2026 04:01:14 +0000
Manifest next update: Fri 25 Sep 2026 04:01:14 +0000
Files and hashes: 1: Ay1SsyOaHOPN00MxNIzngN3xZMA.crl (hash: jIYa0f6v5SuIUSAZwKemZ1RjJDsbZg9wzKAHPbJxhsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:1d:ea:9c:9e:f0:cb:22:76:0b:c2:27:64:d0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Validity
Not Before: Sep 24 04:01:14 2026 GMT
Not After : Sep 25 04:01:14 2026 GMT
Subject: CN=51b7b9929fd21fc29caf48a3b71fc224b583a563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:5b:6d:00:00:ae:11:7d:5f:f2:45:73:8c:
83:30:99:46:f4:0b:b3:f7:cc:f4:4b:dd:52:c7:cb:
ee:bd:a6:79:4d:c4:3a:88:26:15:37:81:46:b6:ca:
07:5d:29:ff:78:73:c6:7e:90:54:b7:cb:de:3a:cd:
63:34:dd:d0:4a:22:b0:7f:ff:f7:8a:a0:00:09:ed:
c1:0a:7e:03:71:4d:71:03:f8:14:37:ce:4b:b6:b3:
24:83:5a:fb:91:0d:9b:99:3e:72:77:f6:e2:b0:43:
cb:07:46:6f:4e:38:1e:b3:be:d4:80:0d:84:35:b9:
18:cc:db:42:d6:d1:88:c5:0b:0f:d9:a6:92:e3:4b:
81:4e:cf:12:6b:05:17:a4:4a:f8:59:f6:13:bd:98:
33:4a:b6:b1:75:bf:60:45:08:a8:72:78:45:3b:a5:
c2:0e:45:d7:97:21:1c:34:09:4f:1a:bb:e2:b6:68:
02:12:1e:ab:d6:0f:4c:1f:37:db:82:03:87:83:ca:
db:fe:93:34:99:3c:82:ec:41:6a:ba:f3:43:14:91:
f7:d9:8b:f9:a1:0e:25:d6:94:b8:0a:5e:ae:19:6a:
e8:ca:38:06:95:0d:0a:42:94:ca:e8:cb:9a:e3:16:
9a:8d:11:43:ad:ae:40:db:ce:98:26:df:d6:62:64:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:B9:92:9F:D2:1F:C2:9C:AF:48:A3:B7:1F:C2:24:B5:83:A5:63
X509v3 Authority Key Identifier:
keyid:03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:23:9c:54:0f:28:d7:4e:25:05:70:8b:98:96:51:1b:7c:f1:
eb:5c:61:85:29:6a:df:4a:1f:b8:14:1f:b8:48:01:97:9a:9e:
56:bd:c7:3d:1b:7c:ae:56:6e:40:4e:4e:fe:92:8e:47:bd:44:
6f:96:bf:88:a0:65:e5:f9:0f:c1:11:2f:74:5d:02:67:da:fa:
e5:99:41:fd:a9:00:9a:4f:0c:3b:ce:f8:67:e6:34:b0:98:85:
ef:44:6a:2f:9b:92:33:0e:70:9d:ef:64:b3:e3:44:5b:2a:f3:
4b:de:65:da:49:b8:f0:46:b6:a0:fa:06:db:00:e7:e9:65:3f:
c0:3b:44:ff:d6:ff:74:7b:52:4d:2e:1a:47:94:e8:dd:cb:2b:
3c:e8:9a:f7:85:11:f9:a4:84:d8:64:bb:04:98:bd:25:23:06:
78:d3:a9:1a:31:d2:9b:e0:b3:1f:2f:af:b5:e3:fb:f1:df:be:
7a:f6:b2:23:b1:85:f3:f8:f8:e5:e4:af:57:df:5d:8b:e8:7b:
5b:55:d0:49:46:68:08:49:b7:8e:17:1d:58:bd:b6:6c:eb:e7:
55:f3:ca:99:68:41:25:63:8c:a1:cf:60:cd:f4:77:6c:80:27:
20:df:79:ca:54:25:fb:55:88:44:9a:d6:40:3b:5d:f3:87:8f:
02:44:f1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:02:36 2026 by rpki-client